Hi,
Which is the version of 389-ds-base you are running ?
By the way, have you enabled TLS on server side ?
In entry:
dn: cn=encryption,cn=config
the attribute nsTLS1 should be "on" :
nsTLS1: on
Thanks and regards,
German.
----- Original Message -----
> From: "ozikat" <ozikat12@xxxxxxxxx>
> To: 389-users@xxxxxxxxxxxxxxxxxxxxxxx
> Sent: Sunday, July 26, 2015 6:20:13 PM
> Subject: PassSync to 389DS SSL Error: Peer reports incompatible or unsupported protocol version.
>
> Good day everyday,
>
> I came across the problem to connect from 389PassSync Version
> 1.1.6-x86_64 running on Windows 2008 R2 _to_ 389-DS version 1.2.11.15
> that running on Linux CentOS 6.6.
>
> Below is the error seen on /var/logs/dirdrv/slapd-xxx/access
>
> ### Access Log Start ###
>
> [26/Jul/2015:15:47:37 +0000] conn=4 fd=65 slot=65 SSL connection from
> x.x.x.x to y.y.y.y
> [26/Jul/2015:15:47:37 +0000] conn=4 op=-1 fd=65 closed - Peer reports
> incompatible or unsupported protocol version.
> [26/Jul/2015:15:47:45 +0000] conn=5 fd=65 slot=65 SSL connection from
> x.x.x.x to y.y.y.y
> [26/Jul/2015:15:47:45 +0000] conn=5 op=-1 fd=65 closed - Peer reports
> incompatible or unsupported protocol version.
> [26/Jul/2015:15:48:01 +0000] conn=6 fd=65 slot=65 SSL connection from
> x.x.x.x to y.y.y.y
> [26/Jul/2015:15:48:01 +0000] conn=6 op=-1 fd=65 closed - Peer reports
> incompatible or unsupported protocol version.
> [26/Jul/2015:15:49:15 +0000] conn=1 fd=64 slot=64 SSL connection from
> x.x.x.x to y.y.y.y
> [26/Jul/2015:15:49:15 +0000] conn=1 op=-1 fd=64 closed - Peer reports
> incompatible or unsupported protocol version.
>
> ### Access Log End ###
>
> I tried to connect using ldp.exe on Windows 2008 Server, it seems ok.
> Just that PassSync unable to communicate via the SSL connections from
> the server.
>
> ###### ldp.exe start #####
> ld = ldap_open("curry.noodle.com", 636);
> Established connection to curry.noodle.com.
> Retrieving base DSA information...
> Getting 1 entries:
> Dn: (RootDSE)
> dataversion: 020150726160257020150726160257;
> defaultnamingcontext: dc=noodle,dc=com;
> namingContexts (2): dc=noodle,dc=com; o=netscaperoot;
> netscapemdsuffix: cn=ldap://dc=curry,dc=noodle,dc=com:389;
> objectClass: top;
> supportedControl (21): 2.16.840.1.113730.3.4.2; 2.16.840.1.113730.3.4.3;
> 2.16.840.1.113730.3.4.4; 2.16.840.1.113730.3.4.5; 1.2.840.113556.1.4.473
> = ( SORT ); 2.16.840.1.113730.3.4.9 = ( VLVREQUEST );
> 2.16.840.1.113730.3.4.16; 2.16.840.1.113730.3.4.15;
> 2.16.840.1.113730.3.4.17; 2.16.840.1.113730.3.4.19;
> 1.3.6.1.4.1.42.2.27.8.5.1; 1.3.6.1.4.1.42.2.27.9.5.2;
> 1.2.840.113556.1.4.319 = ( PAGED_RESULT ); 1.3.6.1.4.1.42.2.27.9.5.8;
> 1.3.6.1.4.1.4203.666.5.16; 2.16.840.1.113730.3.4.14;
> 2.16.840.1.113730.3.4.20; 1.3.6.1.4.1.1466.29539.12;
> 2.16.840.1.113730.3.4.12; 2.16.840.1.113730.3.4.18;
> 2.16.840.1.113730.3.4.13;
> supportedExtension (14): 2.16.840.1.113730.3.5.7;
> 2.16.840.1.113730.3.5.8; 2.16.840.1.113730.3.5.3;
> 2.16.840.1.113730.3.5.12; 2.16.840.1.113730.3.5.5;
> 2.16.840.1.113730.3.5.6; 2.16.840.1.113730.3.5.9;
> 2.16.840.1.113730.3.5.4; 2.16.840.1.113730.3.6.5;
> 2.16.840.1.113730.3.6.6; 2.16.840.1.113730.3.6.7;
> 2.16.840.1.113730.3.6.8; 1.3.6.1.4.1.1466.20037 = ( START_TLS );
> 1.3.6.1.4.1.4203.1.11.1;
> supportedLDAPVersion (2): 2; 3;
> supportedSASLMechanisms (5): EXTERNAL; CRAM-MD5; DIGEST-MD5; ANONYMOUS;
> GSSAPI;
> vendorName: 389 Project;
> vendorVersion: 389-Directory/1.2.11.15 B2014.314.1342;
>
> -----------
> res = ldap_simple_bind_s(ld, 'cn=spicy,cn=config', <unavailable>); // v.3
> Authenticated as: 'cn=spicy,cn=config'.
> -----------
>
> ###### ldp.exe end #####
>
> Hopefully there are jedi in the rom can help ;)
>
> --
> Ozikat
> --
> 389 users mailing list
> 389-users@xxxxxxxxxxxxxxxxxxxxxxx
> https://admin.fedoraproject.org/mailman/listinfo/389-users
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users
